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Abstract 


Recent work has provided a set of necessary and sufficient conditions for 
identifiability of additive step faults (e.g., lock-in-place actuator faults, 
constant bias in the sensors) using state augmentation. This paper ex- 
tends these results to an important class of faults which may affect linear, 
time-invariant systems. In particular, the faults under consideration are 
those which vary with time and affect the system dynamics additively. 
Such faults may manifest themselves in aircraft as, for example, control 
surface oscillations, control surface runaway, and sensor drift. The set of 
necessary and sufficient conditions presented in this paper are general, 
and apply when a class of time- varying faults affects arbitrary combina- 
tions of actuators and sensors. 

The results in the main theorems are illustrated by two case stud- 
ies, which provide some insight into how the conditions may be used 
to check the theoretical identifiability of fault configurations of interest 
for a given system. It is shown that while state augmentation can be 
used to identify certain fault configurations, other fault configurations 
are theoretically impossible to identify using state augmentation, giving 
practitioners valuable insight into such situations. That is, the limita- 
tions of state augmentation for a given system and configuration of faults 
are made explicit. Another limitation of model-based methods is that 
there can be large numbers of fault configurations, thus making identifi- 
cation of all possible configurations impractical. However, the theoretical 
identifiability of known, credible fault configurations can be tested using 
the theorems presented in this paper, which can then assist the efforts 
of fault identification practitioners. 
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Introduction 


1.1 Background 

In this paper, the term fault denotes a state in a dynamical system, 
which may result in a malfunction or failure of the system [1] . A failure 
is either an intermittent or permanent interruption of a system’s ability 
to fulfill a desired function [2] . In dynamical systems with actuators and 
sensors, faults in these components may lead to failures characterized by, 
for example, instability and loss of control. 

In domains such as civil aviation and space operations, such actuator 
and sensor faults can have particularly serious implications for safety and 
reliability. For example, actuator faults such as rudder runaway have 
been implicated in multiple aviation incidents (for example, see [3] and 
[4]). Other actuator faults such as undesired control surface oscillations 
(e.g., the oscillatory failure case ) can increase the structural loads on 
an aircraft and compromise its structural integrity in flight [5,6]. As 
a further example, sensor-bias faults have contributed to the failure of 
missions such as NASA’s Demonstration of Autonomous Rendezvous 
Technology (DART) [7]. Many more examples of aviation incidents and 
accidents where actuator or sensor faults were implicated as contributing 
factors can be found in [8]. 

In the aerospace industry, safety and reliability concerns associated 
with actuators and sensors are primarily addressed through techniques 
based on hardware redundancy [9, 10]. The counterpart to hardware 
redundancy is generally referred to as analytical redundancy , a broad 
class of techniques which make use of mathematical models of a system 
to detect and identify actuator and sensor faults. Such model-based 
fault detection and identification (FDI) methods have received significant 
attention in the literature over the last several decades. For surveys on 
a variety of model-based FDI techniques see [11-14], 

The model-based technique investigated in this paper uses multiple 
models, where each model corresponds to the nominal system state aug- 
mented by a set of fault configurations of interest. Typically, a bank of 
detection filters is used to estimate the present state of the aircraft, and 
multiple-hypothesis testing determines if a fault has occurred [15-17]. 
Several authors have proposed using state augmentation, e.g., [16-21], 
However, a key requirement for state augmentation to be effective is that 
each model, or fault configuration of interest, be identifiable [22], 

Identification of constant bias-type faults was initially treated in [23]. 
The preliminary conditions for identifiability of these faults in arbitrary 
combinations of actuators and sensors were presented in [17], and a sub- 
sequent, detailed analysis was given in [24], A complete characterization 
of a set of necessary and sufficient conditions, including numerical ex- 
amples, can be found in [22], This paper extends these results to the 
broader class of additive, time-varying faults, which includes faults such 
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as the sinusoidal and ramp faults, while still remaining applicable to the 
step fault. 

This paper treats time-varying faults as outputs of exogenous, lin- 
ear, time-invariant (LTI) systems which then additively affect a given 
LTI system of interest. In particular, a set of necessary and sufficient 
conditions for identifiability of additive, time- varying faults affecting ar- 
bitrary combinations of (1) actuators only, (2) sensors only, and (3) 
combinations of actuators and sensors are presented. These conditions 
fully characterize the identifiability of such faults using state augmenta- 
tion, which provides designers a deeper understanding of the theoretical 
reasons for non-identifiability and have practical implications on the lim- 
itations of using state augmentation alone, especially when the theory 
shows a fault configuration of interest is not identifiable by state aug- 
mentation. The approach in this paper is the investigation of the causes 
of non-identifiability beyond the level of (numerical or analytical) rank 
tests, i.e. , it seeks to provide exactly the reason(s) why such rank tests 
will fail for a particular system and set of faults. 

The remaining sections of this paper are organized as follows: Section 
2 gives a short review of observability, detectability, and the Rosenbrock 
System Matrix; Section 3 develops a state-space representation for time- 
varying actuator and sensor faults using state augmentation; Section 4 
presents a set of necessary and sufficient conditions for identifiability 
of additive, time-varying faults affecting arbitrary combinations of ac- 
tuators, sensors, or both, where examples using a practical system are 
included; Section 5 presents the conclusions of the research and sugges- 
tions for future directions. 

2 A Short Review of Key Concepts 

This section provides a short review of the concepts of observability, 
detectability, and the Rosenbrock System Matrix (RSM). 

2.1 A Review of Observability and Detectability 

First, consider a system having state-space representation given by 

x(t) = Ax(t) + Bu(t ), x(0) = xq, (1) 

y(t) = Cx(t) + Du(t), (2) 

where A G M. nxn ,B G M nxm , C G M. lxn , and D G M. lxm . Furthermore, 
x(t) G M. n ,u(t) G M m , and y(t) G are the state, input, and output 
vectors, respectively. In many practical systems, certain states may not 
be directly measurable, so state estimators (i.e., observers) are used to 
infer the unknown state(s) by making use of the output vector y(t) and 
the input vector u(t). For an observer to be effective, a system must 
generally be observable , or at the very least detectable. 
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A system is said to be observable if there exists a time 1 1 > 0 such 
that any initial state xo can be uniquely determined from y(t), t. £ [ 0 , t\] 
[25]. Two equivalent tests for observability given in [26] are the Popov- 
Belevitch-Hautus (PBH) rank test and the PBH eigenvector test. 

Test 1. PBH Rank Test. The system given by Equations (1) and (2) is 
observable if and only if for every eigenvalue A; of A, that is for every 
A i £ A(A), where A(A) denotes the set of eigenvalues of A, 


rank 


A il - A 

C 


= n 


for i = 1 , 2 , . . . , n. 


Test 2. PBH Eigenvector Test. The system given by Equations (1) 
and ( 2 ) is observable if and only if there does not exist a nonzero 7 £ C n 
such that 


a a - a 

c 


7 = 0 


for i = 1,2, ... ,n. That is, the pair (C, A) is observable if and only if 
C 7 7 ^ 0 for every eigenvector 7 of A. 


If either Test 1 or 2 fails for any value A j, i = 1, . . . , n, then A j is an 
eigenvalue corresponding to an unobservable mode of A. An eigenvalue 
A is an open left-half plane (OLHP) eigenvalue if and only if 9te(A) < 0. 

Let A U (A) denote the set of eigenvalues that lie on the closed right 
half plane. The system given by Equations (1) and (2) is said to be de- 
tectable if and only if all of the eigenvalues associated with unobservable 
modes of A lie in the OLHP [25] . Thus, a system is detectable if and only 
if either Test 1 or 2 is satisfied for {A j : Dlt(Xj) > 0}, j = 1,2 ,.. . ,k, 
where k <n [25]. 

Since observability requires that Test 1 be satisfied for all eigenvalues 
of A, observability implies detectability. However, because detectabil- 
ity requires only those eigenvalues with non-negative real parts corre- 
spond to observable modes of A, an unobservable system may still be 
detectable. Finally, a system may be detectable, but if it has eigenvalues 
with negative real parts associated with unobservable modes of A, the 
system is still not observable. Thus, observability implies detectability, 
but detectability does not imply observability. 


2.2 Deriving the Rosenbrock System Matrix 

The Rosenbrock System Matrix (RSM) and some of its important prop- 
erties are used in the proofs of conditions for time-varying actuator and 
sensor fault identihability. The derivation of the RSM follows. 

Consider the system given by Equations (1) and (2). This system 
can be represented in the frequency domain by its one-sided Laplace 
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transformation as 


sx(s) — xo = Ax(s ) + Bu(s), 
y(s ) = Cx(s) + Du(s), 


(3) 

(4) 


where x(s), u(s), and y(s) are the Laplace transforms of the state, input, 
and output vectors, respectively. Furthermore, xq is the initial condition 
at time t = 0, that is, x(0). Here, the one-sided Laplace transform, T(s), 
of a function T (f ) is defined as 

poo 

t (s)= / T (t)e~ st dt. (5) 

J o- 


Now, the representation given by Equations (3) and (4) can be expressed 


si — A —B x(s) _ xo 
C D \ [ u(s) \ ~ [ y(s) 


( 6 ) 


The coefficient matrix in (6) is referred to as the Rosenbrock System 
Matrix of the system having realization {A, B , C, D}. 


3 Time- Varying Fault Modeling 

This following development gives a representation for time- varying faults 
by treating them as outputs of an exogenous LTI system driven only by 
initial conditions. It is assumed throughout that the fault of interest has 
a one-sided Laplace transform as defined by Equation (5). 

3.1 A Representation for Time-Varying Faults 

Let f(t) be a vector of faults. Such faults may be modeled as the output 
of an LTI system having state-space representation given by 

Xf(t) = A f Xf(t), x f ( 0) = x fo , (7) 

f{t) = C fX f(t), (8) 

where Af € W l f xn f ,Cf G M MXr T, Xf(t) G M n ^, and /(f) G M^. It is 
assumed that Cf has full row rank, that is, rank (C/) = ji. Taking the 
Laplace transform of Equations (7) and (8), and solving for Xf(s) in 
Equation (7) gives 

x f (s) = (si - A f )~ l x fo , (9) 

f(s) = CfXf(s). (10) 

Now, substituting Equation (9) into Equation (10) gives 

f(s) = C f (sI-A f )- 1 x fo . 

Thus, the frequency domain representation of the fault vector is the 
zero-input response of the system given by Cf(sl — Af)~ 1 Xf 0 . 
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3.2 Actuator Fault Modeling 

Consider a system given by Equations (1) and (2). If '/rq. of the m actu- 
ators are affected by additive, time-varying faults, the system dynamics 
can be represented as 

x(t) = Ax{t) + ^ bjUj(t) + ^ bjUj{t) + uj p (t), (11) 

j^Fak j^Fak 

= Ax(t ) + B k u k (t) + B k u k (t ) + uj p (t ), (12) 

y(t) = Cx(t) + uj s (t), (13) 

where B k G M nxmfc , B k G ^ € R™*, u fc (t) € 

w p (t) G M n , and w s (t) G M z . Furthermore, 7v,fc in Equation (11) denotes 
the set of indices corresponding to the failed actuators, Uj (t) G M denotes 
a faulty input associated with a faulty actuator at time t, Uj(t ) G M de- 
notes a non-faulty input associated with a non-faulty actuator at time 
t, and bj G M n denotes the particular column of B (see Equation (1)) 
affected by the corresponding faulty or non-faulty actuator. Thus, Equa- 
tion (12) represents the system subject to a particular actuator fault 
configuration. 

Now consider the state-space representation for time-varying faults 
given by Equations (7) and (8). Observe that such a representation may 
model time- varying faults in the actuators, resulting in a system with 
fault state vector, x a (t), and output u k (t ), i.e., 

x a (t) = A a x a {t) +u Pa (t), x a (0) = x ao , (14) 

u k {t) = C a x a {t) + u> Sa (t), (15) 

where A a G M n “ xn “, C a G and x a (t) G M n “. Additionally, 

terms for the exogenous actuator fault process and measurement noise, 
i.e., 0 J Pa (t) G M n “ and a ; Sa (t) G M mfe , respectively, have been added. 
These terms allow for the modeling of faults which might not manifest 
themselves as entirely deterministic representations in practice. Now, 
Equations (12)-(15) can be combined to represent the interconnected 
system. Thus, the state-augmented system can be represented as 
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where, after making the appropriate substitutions indicated by the 
braces, the system above can be expressed more compactly as 


i k (t) = A\e{t) + B\u k {t) + W £(t), (18) 

v(t) = Cj[Z k (t)+Ua(t). (19) 

Equations (18) and (19) model the general case of arbitrary, additive, 
time-varying actuator faults treated in this paper. In the case of step 
faults, A a = 0 m k xm k , and C a = Im k ■ Thus, Equation (16) reduces to 


x(t) 


A 

i 

|Cq 


x(t) 

+ 

- B k - 

_ X a (t) _ 


0 

Im k 


_ x a (t) _ 

0 


B k u Sa {t) + u p (t) 
U Pa (t) 


(20) 


which is identical to Equation (4) in [22], where the case of actuator step 
faults was considered. 


3.3 Sensor Fault Modeling 

Consider again a system given by Equations (1) and (2). If q of the l 
sensors for the given system are affected by additive, time- varying faults, 
the system dynamics can be represented as 


x(t) = Ax(t ) + Bu(t ) + uj p (t), 

yi{t) 

V2 (t) 


y(t) = 


= Cx(t ) + 


0 

y s (t) 


+ w s (t), 


(21) 

(22) 

(23) 


where A, B, C, x(t), u(t), y(t), uj p (t), and u s (t) are as previously defined, 
and y\ (t) G M. l ~ q and 1/2 (t) G M 9 represent the vectors containing the 
fault-free sensor measurements and the faulty sensor measurements, re- 
spectively. Finally, y s (t) € K 9 is the vector containing the additive time- 
varying sensor faults affecting the q faulty sensors. 

Furthermore, consider the fault dynamics represented by Equa- 
tions (7) and (8). Such a representation can be modified to address 
the specific case of sensor faults as 


x s (t) = A s x s (t) +uj Ps (t),x s ( 0) = x so , (24) 

y s (t) = C s x s (■ t ) + u Ss (■ t ) , (25) 

where A s G M nsXn s , C s G R qxria , x s (t) G M ns , y s (t) G R 9 , and u J Pa (t) G 
R ns and oj Ss (t) G R 9 are exogenous sensor fault process and measurement 
noise, respectively. Observe that Equations (24) and (25) model the 
sensor faults present in Equation (23). Thus, Equations (21) and (23) 
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can be viewed as an LTI system with q of its outputs affected by time- 
varying sensor faults given by the output of the exogenous LTI system in 
Equations (24) and (25). The interconnected system can be represented 
in augmented state-space form by letting u s (t) = [ ujJ j (t) ] 

and by substituting Equation (25) into Equation (23) as follows 


x(t) 

X s {t ) _ 

s. 

A 0 n xn s 

0 n s xn A s 

x(t) 

_ x s (t) 

+ 

n B u(t) + 

Vn s xm 

u p (t) 

. Up s (t) J ’ 

II 

5* 

A.rj 

C 1 0 (l-q)xn 

_c 2 c s 

v(t) 

x(t) 

_ Xs(t) _ 

+ 

B v 

Wai (t) 

_ v S2 (t) +u Ss (t.) _ 

“7 , p (t) 

(26) 

, (27) 


CV, Ur ls (t) 


where by making the appropriate substitutions indicated by the braces, 
the system above can be expressed more compactly as 


rj{t) = A v i](t ) + B v u(t) + u Vp (t), (28) 

y(t) = c v rj(t) + w„,(t). (29) 

Equations (28) and (29) model the general case of additive, time- varying 
sensor faults treated in this paper. 

In the case of sensor step faults, A s = 0 qxq , and C s = I q . Thus, when 
all of the sensor faults are step faults, Equations (26) and (27) reduce to 


i i 

•H . H 

1 1 

= 

1 1 

o o 

^ o 

x{t) 

_ X s (t) _ 

+ 

1 1 
cq o 

u(t) + 

UJ p (t) 

iOp s {t) 


y(t) = 


Cl 

c 2 


J L 


x(t) 

x s (t) 






u S2 (t) + UJ Ss (t) 


(30) 

(31) 


Equations (30) and (31) are identical to Equations (17) and (18) in [22], 
where the case of sensor step faults was considered. 


3.4 Simultaneous Actuator and Sensor Fault Modeling 

Consider the case of time-varying actuator faults represented by Equa- 
tions (14) and (15) and the case of time- varying sensor faults represented 
by Equations (24) and (25). Now, in order to represent simultaneous, 
additive, actuator and sensor faults, it is sufficient to augment the states 
in the form [ x(t) T x a {t) T x s (t) T ] . Thus, when q of the l sensors 
and rrik of the m actuators are affected by time-varying faults, the aug- 
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mented system can be expressed as 


x(t) 


Xa{t ) 

= 

X s (t) _ 

- 


+ 

yi(t) 

r 

_ V2(t) _ 



A 

0 n a xn 
0 n,xn 


B k C a 

A n 


Jn s xn a 


0 nxn s 
0 n„xn s 

A s 


B u Sa {t) + u p (t) 
Vp a (t) 

u Ps (t) 


u <Pp ( t ) 

Cl ®(l-q)xn a 
C-2 Oqxria 


0 



x(t) 


- B k - 


X a {t) 

+ 

0 


_ x s (t) _ 


0 


Cv 


+ 


UJ s ,l(t) 

U s , 2 (t) +U Ss (t) 


‘ P{t) 


(l—q)xn s 

c. 


1 

1 


Xait) 


_ X s it) _ 




«*(*) 


(32) 


(33) 


Ul Vs (t) 


where after making the appropriate substitutions indicated by the braces, 
the system above can be expressed compactly as 


<p(t) = A p ^{t) + B^u k {t) + u Vp (t), (34) 

y(t) = C p (p{t) + oj Vs ( t ). (35) 


Equations (34) and (35) model the general case of simultaneous, additive, 
time-varying actuator and sensor faults treated in this paper. 

For the case when all actuator and sensor faults are step faults, A a = 
Omj, x mi, > A s — QqxqiC a — 7 mfc , and C s — Iq. Then, Equations (32) 
and (33) reduce to 


x(t) 

Xait) 

x s (t ) 


yi(t) 
V2 (t) 


A 


B k 


+ 


0 rn^xn Omfc xm^ 
0 qxn O^xm/g 

B k u Sa {t) + u p (t) 

Up a (t) 

Up s (t) 


u nxg 
Om*. X q 
0 qxq 


Cl ®(l—q)xrrik 

C-2 0 n 


0 


J qxm k 


+ 


U s , l(t) 

U s ,2(t) +U Sa (t) 



x(t) 


- B k ' 


Xait) 

+ 

0 


_ x s (t) 


0 


(l-q)xq 

In 


1 

'Tf 

1 


Xait) 

- 

_ x s (t) _ 


u k (t ) 


(36) 


(37) 


Equations (36) and (37) are identical to Equations (31) and (33) pre- 
sented in [22], where the case of simultaneous actuator and sensor step 
faults was considered. 



4 Conditions for Identifiability of Time- Varying 
Actuator and Sensor Faults 

The main results of this paper are developed in this section, that is, a set 
of necessary and sufficient conditions for the identifiability of additive, 
time-varying faults affecting combinations of 

(1) actuators only, 

(2) sensors only, and 

(3) actuators and sensors, simultaneously. 

The conditions are presented as three separate theorems accompanied 
by a proof for each of the indicated fault configurations. It is further 
shown through corollaries that, when all of the faults are step faults, a 
set of necessary and sufficient conditions for items (1), (2), and (3) above 
reduce to those presented in [22]. 

Mathematically, a fault is identifiable if the augmented system is 
detectable. However, in some practical applications, observability is pre- 
ferred [22]. This paper presents conditions for both detectability and 
observability, where satisfying either property shall imply identifiability, 
in the weak and the strong sense, respectively. Before the conditions 
for identifiability and the associated proofs are given, several relevant 
assumptions are addressed. 

4.1 Assumptions 

It is assumed in the proofs in this section that the following rank condi- 
tions are satisfied: 



(Al) rank(£> ) = m^, where B corresponds to the columns of B asso- 
ciated with the irik faulty actuators, 

(A2) rank (6’) = l, 

(A3) rank(C' a ) = rn ^ , where C a represents the output matrix associ- 
ated with an exogenous LTI system which generates the rrik time- 
varying actuator fault signals, 

(A4) rank(C' s ) = q, where C s represents the output matrix associated 
with an exogenous LTI system which generates the q time- varying 
sensor fault signals, 

(A5) rank(C'i) = l — q, where C\ corresponds to the rows of C associated 
with the l — q non-faulty sensors, and 

(H6) rank(C < 2 ) = q, where C *2 corresponds to the rows of C associated 
with the q faulty sensors. 
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Assumptions (Al) and (A2) are taken directly from [22], that is: (1) it 
is assumed that inputs associated with linearly dependent columns of 

k 

B have been aggregated and that B is full column rank, and (2) it 
is assumed that outputs associated with linearly dependent rows of C 
have been aggregated and that C is full row rank. If (Al) or (A2) do not 
hold, faults associated with linearly dependent columns of B , or linearly 
dependent rows of C will not be uniquely identifiable. Similarly, As- 
sumptions (A3) and (A4) follow from the representation of time-varying 
actuator and sensor faults shown in Sections 3.2 and 3.3, respectively. 
Finally, Assumptions (A5) and (A6) follow from Assumption (A2). 

4.2 Time- Varying Actuator Fault Identifiability 

Before the main conditions are provided, a preliminary notation is de- 
veloped, and two useful lemmas are provided. First, let E(s) denote the 
RSM given by 

si -A -B k 
C 0 

and let T^(s) C C n+mk denote the right nullspace of E(s), where s £ 
C. Furthermore, let ri fc (s) C C mk denote the subspace spanned by 
the last m.fc components of a basis for r^(s). The elements of ri t (s) 
are characterized next in terms of (extended) invariant zeros and input- 
zero directions. For a recent treatments of these objects in the context 
intended in this paper, see [27]. 

1. When s is an (extended) invariant zero but not an output- 
decoupling zero of E(s), then T m k (s) = l?l fc (s)U{0}, where Qm k {s) 
is the set of all input-zero directions of E(s), 

2. When s is an (extended) invariant zero and an output-decoupling 
zero of E(s), then lfn k (s) = Gm k (s ) = {0} is the only input-zero 
direction of E(s), and 

3. When s is not an invariant zero of E(s), then Tm k (s) = Qm k {s) is 
the subspace spanned by all of non-input-zero directions of E(s). 

Lemma 1. The pair ( C a ,A a ) is detectable (observable) if and only if the 


pair ( B C a ,A a ) is detectable (observable). 

k 

Proof. Observe that the pair (B C a , A a ) is detectable (observable) if and 
only if 

= n a for s £ A u {A a ) (s £ A(A a )), 

= n a for s £ A «(A a ) (s £ A(A a )). 


rank 


si - A a 
B k C n 


rank 


In 0 
0 B k 


si - A a 

C a 


10 



By Sylvester’s inequality (see [28]) and Assumptions (Al) and (A3), 


rank 


si - A a 

< rank 

'in 0 

— A* 


si - A a 

< rank 

si - A a 

C a 


0 BTCa _ 


C a 


C a 


Therefore, rank 


si - A a 
B k C a 


rank 


si - A 
C a 


a 


for s G A u (A a ) ( s G 


A(A 0 )), so that the pair (C a ,A a ) is detectable (observable) if and only 

k 

if the pair ( B C ai A a ) is detectable (observable). □ 


Lemma 2. The pair (C^, A|) is detectable (observable) if and only if all 
of the following conditions are satisfied: 


(i) the pair (C, A) is detectable (observable), 

(ii) ( C a ,A a ) is detectable (observable), and 

(in) for ( X a ,v ) an ( eigenvalue , eigenvector ) pair of A a with X a G 
A u (A a ) (A o G A (A a )), C a v i ri fe (A a ). 

Proof. Applying the PBH eigenvector test, the pair (C^, A^) is detectable 
(observable) if and only if 


si- A 

0 n a xn 

c 


-B k C a 
si - A a 

0 lxn a 



= 0 


is satisfied only by the trivial solution (that is, [ ( T v T ] 7 = 0) for s G 
A U (A) U A u (A a ) (for s G A(A) U A (A a )). The first n columns of the 
PBH test matrix are independent for s G A U (A) (for s G A(A)) if and 
only if the pair (C, A) is detectable (observable). The last n a columns 
are independent for s G A u (A a ) (for s G A(A 0 )) if and only if the pair 
(C a ,A a ) is detectable (observable) (see Lemma 1). For s ^ A (A 0 ) the 
last n a columns are independent of the first n columns. For s = A a G 
A u (A a ) (s = A a G A(A a )) the last n a columns are independent of the 
first n columns if and only if 


A a I-A -B k 
G 0 

V v 

S(A a) 

does not have a nontrivial solution for (A a , v) an (eigenvalue, eigenvector) 
pair of A a , that is, if and only if C a v £ Fm fe (A a ). □ 

The following theorem provides a necessary and sufficient condition for 
the identifiability of additive, time-varying actuator-only faults. 


C aV 


= 0 


(38) 


11 



Theorem 1 . The pair (C^,A^) is detectable (observable) if and only if 
all of the following conditions are satisfied: 

(i) for (. X a ,v ) an (eigenvalue, eigenvector ) pair of A a with X a G 
A u {A a ) (X a G A(A a )), when l < m k and when X a is not an in- 
variant zero ofTi(Xa), then C a v ^ ^(AJ, 

(ii) the pair (C, A) is detectable (observable), 

(in) the pair (C a , A a ) is detectable (observable), and 

(iv) for ( X a ,v ) an (eigenvalue, eigenvector) pair of A a with X a G 
A u {A a ) (X a G A(A a )), when X a is an invariant zero ofT,(X a ), then 
C a v ^ Gm k (X a ). 

Proof. The pair (C'|,A|) is detectable (observable) if and only if Con- 
ditions (i)-(iii) of Lemma 2 are satisfied. Thus, Conditions (ii) and (iii) 
of Theorem 1 are established. It remains only to be shown that Condi- 
tions (i) and (iv) of Theorem 1 now hold if and only if Condition (ii) of 
Lemma 2 holds. Now, suppose that Conditions (i) and (iv) of Theorem 1 
hold and that Condition (iii) of Lemma 2 does not. Then Equation (38) 
has a nontrivial solution. The following two possible cases will be con- 
sidered and shown to result in a contradiction: 

1. rank{X(A a )} < rank{X(s)}, and 

2. rank{X(A a )} = rank{X(s)} with 

(a) rank{X(s)} = n + min {mk, l}, or 

(b) rank{X(s)} < n + min {mk, l}. 

Case 1 leads to a nontrivial solution if and only if (A a , C a v) is an (invari- 
ant zero, input-zero direction) pair of E(A a ), a contradiction of Condition 
(iv) of Theorem 1, that is, C a v G Gm k ( X a ). Case 2(a) leads to a nontriv- 
ial solution if and only if l < mk and C a v G G^ mk ( X a ), a contradiction of 
Condition (i) of Theorem 1. Case 2(b) implies that X(s) is degenerate, 
that is, every A a G C is an invariant zero X(s). Thus, Case 2(b) leads 
to a nontrivial solution if and only if C a v G Gm k (X a ), a contradiction of 
Condition (iv) of Theorem 1. Thus, Conditions (i)-(iv) of Theorem 1 are 
necessary and sufficient for identihability of the pair (C((, A 1 )). □ 

The following corollary considers the case when the geometric multi- 
plicity of X a is equal to n a . One such instance is when A a = 0 „ aX n a , (a 
step fault in n a = nik actuators). 

Corollary 1 . Let X a G A u (A a ) (X a G A(A a )) have geometric multiplicity 
la- If la = n a then Condition (iii) in Lemma 2 becomes 

(i) l > m-k, and 
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(ii) S(s) has no invariant zeros at s = X a 


Proof. Let g £ rm fc (A a ), and consider whether there exists v £ M n “ 
such that C a v = g , where v is an eigenvector of A a in the associated 
eigenspace W, with dim(hL) = j a . Next, observe that C a : M n “ — > M mfc 
is a surjective linear transformation since C a has full row rank, that is, 
rank(C a ) = m k (see Assumption A3). Therefore, for any g £ W m ' k , there 
always exists a vector r £ C n “ such that C a r = g. Now, when 7 a = n a , 
W = C na , and any nonzero vector in C n “ is an eigenvector. Thus, for 
any nonzero solution r, let v = r, and it follows that C a v = g. Therefore, 
when A a has geometric multiplicity 7 a = n a , £(A a ) must have full column 
rank so that r|j fc (A a ) = {0}, implying that l > m k and that A a is not an 
invariant zero of E(s) □ 


Corollary 2. For the special case when all of the faults are constant 
biases, that is, a step fault in each of the m,k faulty actuators, Conditions 

(i) -(iv) of Theorem 1 reduce to: 

(i) l > m k , 

(ii) the pair (C, A) is observable, and 
(in) X(s) has no invariant zeros at s = 0. 

Proof. First, observe that for step faults, n a = m k , A a = 0 naXria and 
C a = Ilia x n a • Thus, A a has one distinct eigenvalue at zero with geometric 
multiplicity n a , that is, any nonzero vector v £ M n “ is an eigenvector 
of A a , and by Corollary 1, Conditions (i) and (iii) of Corollary 2 are 
established. Furthermore, since (C a ,A a ) is observable, Condition (iii) of 
Theorem 1 is not needed. The detectability (observability) requirement 
for the pair (C, A) is now strictly an observability requirement, since 
s = 0 does not lie in the open, left-half plane, thus establishing Condition 

(ii) of Corollary 2. □ 


Remark 1 . The conditions in Corollary 2 are identical to the conditions 
for constant, bias-type actuator fault identifiability presented in Theorem 
1 in [22], 


Example 1. Consider the fourth-order, linearized longitudinal dynam- 
ics model used in [17] and fully examined for additive, bias-type fault 
identifiability in [22]. The model represents a large, transport aircraft in 
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wings-level, cruise condition and is given by 


A = 


B = 


-0.6803 0.0115 -1.0490 0 

-0.0026 -0.0062 -0.0815 -0.1709 

1.0050 -0.0344 -0.5717 0 

10 0 0 

-44.5192 0 

-11.4027 0 

0.88254 1.3287 ' 

-0.0401 0 


( 39 ) 


The state vector consists of the pitch rate, forward speed, angle of attack, 
and pitch angle, that is, x(t) = [ q(t) v(t) a(t ) 6(t.) ] . The control 

vector consists of the elevator deflection and engine thrust, that is, u(t) = 
[ u e (t) u T (t)] T . 

Suppose that one must identify sinusoidal faults having frequency 
uj = 1 radian per second in the elevator actuator and bias-type faults 
having any amplitude in the thrust actuator (i.e. , a “stuck actuator” 
fault). Observe that there are 45 possible fault configurations for the 
particular faults of interest, where either or both actuators are faulty 
CCtz=i {t) sensor configurations, where for each configuration there are 
3 actuator fault configurations possible). Out of these, there are two 
cases of non-identifiability, both due to violation of Condition (iv) of 
Theorem 1. The discussion of these two cases follows. 

Case 1: y{t ) = q(t ) and both actuators are affected by their respec- 
tive fault type of interest, A a = 0 is both an eigenvalue of A a and an 



invariant zero of the triple ( C,A,B ). Furthermore, it can be verified 
that | [ 1 0 ] T ,[ 0 l] T |isa basis for Gm k , therefore for any nonzero 

vector C a v in M 2 it follows that C a v € Gm k ■ 

Case 2: y(t) = q(t) and the thrust actuator becomes stuck. Again 
A a = 0 is both an eigenvalue of A a and an invariant zero of the triple 

k 

(C, A, B ), and in this case it can further be verified that for any C a v G 
C a V £ Gm k ■ 

An interesting observation is that in three of the 45 possible fault 
cases, both actuators are faulty and l < m^, yet the faults are still iden- 
tifiable, that is, all of the conditions of Theorem 1 hold. This situation 
is different from the case when all the faults are “stuck actuators” as 
described in [22], where it is required that l > rriy.. 

4.3 Time- Varying Sensor Fault Identifiability 

This section presents conditions for time- varying sensor fault identifiabil- 
ity. Consider the augmented system given by Equations (26) and (27), 
the model of an arbitrary LTI system subject to time- varying sensor 
faults. The identifiability of such a fault requires that the pair (C v , A v ) 
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be detectable (observable). The following theorem gives a necessary and 
sufficient condition for identifiability of time- varying sensor faults. 

Theorem 2. The pair (C^A^) is detectable (observable) if and only if 
all of the following conditions are satisfied: 

(i) the pair (C, A) is detectable (observable), 

(ii) the pair (C s , A s ) is detectable (observable), and 


(in) when (A s ,£) and (A s ,if) are eigenvalue, eigenvector pairs of A and 
A s , respectively, and X s is not a detectable (observable) eigenvalue 
of the pair (C±,A), then C 2 C, / otC s if, where a € C. 

Proof. The pair ( C n ,A n ) is detectable (observable) if and only if 

si A O n xn s 
On s xn si A s 

Cl ®(l—q)xn s 

C 2 C s 

for s G A U (A) U A U (A S ) (for s G A(A) U A(A S )). The first n columns 
of the PBH test matrix are linearly independent for all s G A «(A) (for 
all s G A(A)) if and only if ( C,A ) is detectable (observable). The last 
n s columns are linearly independent for s G A U (A S ) (for s G A(A S )) if 
and only if (C s , A s ) is detectable (observable). Furthermore, whenever 
s (/ A(A)UA(A S ) the last n s columns are linearly independent of the first 
n columns. Now, let s = X s € A U (A S ) U A U (A) (s = X s G A(A S ) U A(A)). 
The last n s columns are linearly independent from the first n columns if 
and only if 

A si A O n xn s 

0 n s xn X S I — A 

Cl 0(l—q)xn 

C 2 C s 

only for [ ( T if T ] 3 = 0. Now, suppose there exists [ ( T if 7 ' ] T / 0 
such that (40) is satisfied. Then 


(A si ~A)( = 0 

(41) 

(A S I ~ A s )if = 0 

(42) 

C'iC = 0 

(43) 

C 2 ( + C s if = 0 , 

(44) 


must hold. Since the pair (C, A) is detectable (observable) if 7 ^ 0, and 
since the pair (C S ,A S ) is detectable (observable) ( 7 ^ (). Observe that 
Equation (42) is satisfied since if is nonzero and, thus, an eigenvector of 
A s associated with A s . The remaining equations may be expressed as 






O 2 C + C s if — 0 . 
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(45) 

(46) 



If A s is not a detectable (observable) eigenvalue of (Cj , A) then Equa- 
tion (45) is satisfied. Now, Equation (46) is satisfied if and only if 
C 2 C / aC s ip, where a G C. Thus, Conditions (i)-(iii) of Theorem 2 
are necessary and sufficient for identifiability of the pair (C V ,A V ). □ 

The following corollary considers the special case when A s has geo- 
metric multiplicity equal to n s . 

Corollary 3. Let \ s G A n (Aj) n A„(A) (s G A(A S ) n A(A)) have geo- 
metric multiplicity equal to 7 s , and let ip be an eigenvector of A s from 
the associated eigenspace V corresponding to the eigenvalue \ s . Observe 
that dirri(V) = 7 ,,. If 7 s = n s then Condition (in) in Theorem 2 becomes 

(i) the pair (C\,A) is detectable (observable) with respect to s = X s . 

Proof. Observe that C s : M ns — > R 9 is a surjective linear transformation 
since rank(C s ) = q (see Assumption (A4)). Therefore, there always 
exists a vector, p £ C n<f , such that C s p = — C 2 C Now, when = n s , 
V = O, and any vector in C ns is an eigenvector. Then, for any solution 
p let ip = p, and it follows that C s ip = —C 2 (■ That is, whenever = n s , 
Equation (46) is satisfied. Thus, it is required that A s be a detectable 
(observable) eigenvalue of the pair (C\ . A). □ 

Corollary 4. For the special case when all of the faults are constant 
biases, that is, step faults, Conditions (i)-(iii) in Theorem 2 reduce as 
follows: 

(i) the pair ( C , A) is observable, and 

(■ ii ) s = 0 corresponds to an observable mode of the pair (C\, A). 

Proof. First, observe that Condition (i) of Theorem 2 is identical to Con- 
dition (i) of Corollary 4. Now, A s = 0 and C s = I. Thus, Condition (ii) 
of Theorem 2 is no longer necessary, since the pair (C s , A s ) is observable. 
Furthermore, note that the only eigenvalue of A a is s = 0, having alge- 
braic and geometric multiplicity q = n s , and by Corollary 3, Condition 
(ii) of Corollary 4 is established, that is, if {C \ , A) is not observable when 
s = 0 then the pair is not detectable. □ 

Note that Conditions (i) and (ii) of Corollary 4 are exactly those 
presented in Theorem 2 of [22] for the sensor step fault case. 

Example 2. Consider the 6 th-order linearized longitudinal dynamics for 
the Cranfield A3 Observer, a fixed-wing research UAV presented in [29]. 
The UAV is in cruise condition, and the airframe is in a gust-insensitive 
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configuration. The dynamics are given by 


A = 


B = 


-0.146 

-0.016 

0.557 

- 

-9.809 

0 1 

0.001 

-0.63 

-4.487 

34.57 


0.161 

0 

0 

0.001 

0.039 

-0.894 


0 

0 

0 

0 


0 

1 


0 

0 

0 

-0.016 

-1 

0 


35.2 

0 

0 

665.' 

7 

-6.89 

0 


0 

0 

-8.57 

0 

- 

-1.368 ' 






0 

- 

-19.96 






0 

- 

-15.96 






0 


0 

5 





0 


0 






45910 

0 






; is specified as 







' 1 

-0.014 0.019 

0 

0 

0 ' 



0 

0 

1 

0 

0 

0 


C = 

0 

0 

0 

1 

0 

0 



0 

0 

0 

0 

0.984 

0 



0 

0 

0 

0 

0 

1 



The state vector consists of the forward speed, vertical speed, 
pitch rate, pitch angle, altitude, and engine rpm, that is, x(t) = 
[ v(t) w{t ) q(t) 9(t) h(t ) N E (t) ] T . The control vector consists of 

engine thrust and elevator deflection, that is, u(t) = [ ur(t) u e (t) ] . 
The output vector consists of the measured speed error, pitch rate, 
pitch angle, perturbed altitude, and engine rpm, that is, y(t) = 
[ v e (t) q(t ) 9(t ) h e (t) N E {t) ] T . It can be verified that A (A) = 
{0, -4.8345, 1.9641 • 10” 1 , -4.0534 • 10” 1 ± i2.0428 • 10 _1 , -8.6482} and 
that the system realization {A, B, C, 0} is minimal, that is, the system 
is both controllable and observable. 

Suppose that it is of interest to identify drift faults in the sensors, 
which may be modeled as ramp faults. In the absence of actuator faults, 
there are 31 possible sensor fault configurations, excluding the fault- 
free case. Of these, there are 16 cases of non-identifiability, and all 16 
cases of non-identifiability are associated with at least a drift fault in the 
perturbed altitude measurement. Furthermore, any drift faults in any 
combination of the other measurements are always identifiable, provided 
that the altitude measurement is not faulty. 

It can be verified that the pairs (C, A) and (C s , A s ) are always observ- 
able. Furthermore, it can be verified that zero is a common eigenvalue 
of A and any form of A s for the fault configurations of interest, and that 
the eigenvalue at zero corresponds to an unobservable mode of the pair 
(Cl, A) whenever (/ 4 (f) is faulty. The test of whether or not aC s ip = C 2 C 
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for a G C is unnecessary, since the eigenspace of A s associated with 
A s = 0 is such that there always exists if which satisfies the equality. 
Thus, for the 16 cases of non-identihability, Condition (iii) of Theorem 2 
fails. 


4.4 Simultaneous Time- Varying Actuator and Sensor 
Fault Identifiability 

Before presenting the conditions for identifiability for simultaneous ac- 
tuator and sensor faults, a preliminary notation is given. First, let E(s) 
denote the RSM given by 

si - A -B k 
Ci 0 

Thus, the RSM associated with E(s) is to be understood in the context 
of the fault configuration of interest, i.e., whether it is of interest to 
identify faults in the actuators alone or in combination with sensors. 
Furthermore, let r^(s) C C n+mfe denote the right nullspace of S(s), 
where s € C, and let rS?, t (s) C C mfe denote the subspace spanned by the 
last m.fc components of a basis for r ¥3 (s). The elements of Tf nk (s) may be 
characterized similarly to those of ri fc (s) in Section 4.2, where Gm k (s ) 
corresponds to the input-zero directions, and Gm k ( s ) corresponds to the 
non-input-zero-directions. 

Theorem 3. The pair [C^,A^) is detectable (observable) if and only if 
all of the following are satisfied: 

(i) The pair (C|, A|) is detectable (observable), 

(ii) The pair {C v ,A,f) is detectable (observable), 

(iii) for \ a ^ s G A. u (A a )n A U (A S ) (X a , s £ A(A a )nA(A s )) not an invariant 
zero o/E(s) withv and if eigenvectors of A a and A s associated with 
A a ,s> respectively, when l < m-k + q then either C a v ^ Gm k (^a,s) or 
C 2 C aC s if, for a G C, 


(iv) for A a ,s £ A u(Aa) H A U (A S ) (A 0)S G A (A a ) n A(A S )) an invariant 
zero o/E(s), withv and if are eigenvectors of A a and A s associated 
with A a ,s, respectively, either C a v ^ Gm k { A a ,s) or C 2 C / aC s if , for 
a G C. ’ 


Proof. The pair (C^,A V ) is detectable (observable) if and only if the 
equation 


si - A 

-B k C a 

0nxn s 

0 n a xn 

si - A a 

0 n a x n s 

0 n 3 xn 

0 n s xn a 

si - A s 

Cl 

0(Z-g)xn a 

0(Z-g)xn s 

C 2 

0gxn a 

C s 


c 

v 

if 


= 0 , 


(47) 
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is satisfied only by the trivial solution for s £ A U (A) U A u (A a ) U A U (A S ) 
(for s £ A(A) U A(A a ) U A(A S )). All of the possible solution cases to be 
considered are enumerated in Table 1 and treated subsequently. Observe 


Case 

II 

o 

v = 0 

-fi- 

ll 

O 

(a) 

T 

T 

T 

(b) 

T 

T 

F 

(c) 

T 

F 

T 

(d) 

T 

F 

F 

(e) 

F 

T 

T 

(f) 

F 

T 

F 

(g) 

F 

F 

T 

(h) 

F 

F 

F 


TABLE 1: General form of possible solutions to Equation (47). 

that Case (a) represents the trivial solution, and so is always a solution 
to Equation (47). Case (b) can be reduced to considering the equation 

Sl ~ g As * = 0. (48) 

A nontrivial solution to Equation (47) exists for Case (b) if and only if 
Equation (48) is also nontrivially satisfied. That is, if the pair (C s . A s ) 
is not detectable (observable), which corresponds to Condition (i) of 
Theorem 2. 

Case (c) can be reduced to considering the equation 


si - A a 

~B k C a 


v = 0. 


(49) 


A nontrivial solution to Equation (47) exists for Case (c) if and only if 
Equation (49) is also nontrivially satisfied. By Lemma 1, this is possible 
only in the case when the pair (C a ,A a ) is not detectable (observable), 
which corresponds to Condition (iii) of Theorem 1. 

Case (d) can be reduced to considering the equation 


r -B k C a 0 

Si - A a 0 

0 si — A s 

0 Cs 



(50) 


However, Equation (50) can be further represented as two separate equa- 
tions, which must be simultaneously satisfied (i.e., Equations (48) and 
(49)), thus reestablishing the conditions covered under Cases (b) and (c), 
respectively. 
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Case (e) represents a nontrivial solution to Equation (47) if and only 
if the equation 

qT — A ' 

c e = o, (si) 

has a nontrivial solution. Such a solution exists for Case (e) if and 
only if the pair (C,A) is not detectable (observable). This condition is 
addressed in Conditions (ii) and (i) of Theorems 1 and 2, respectively. 

Case (f) can be reduced to considering the following equation. 

si — A 0 

0 si — A s 
Ci 0 

C 2 C s 

By inspection of Equation (52), a nontrivial solution exists if either or 
both of the pairs (C,A) and (C S ,A S ) are not detectable (observable). 
These cases are covered through of Condition (ii) of Theorem 1 and 
Conditions (i) and (ii) of Theorem 2. Furthermore, a nontrivial solution 
to Equation (52) (where both £ and i[) are nonzero) still exists if: 1) s = 
X s € A (A s ), where i/> is a corresponding a eigenvector, 2) A<j corresponds 
to an undetectable (unobservable) eigenvalue of the pair (C\ , A), where 
( is a corresponding eigenvector, and 3) C 2 C £ aC s il>, where «6C. The 
situation of 1) through 3) for Case (f) is addressed in Condition (iii) of 
Theorem 2. 

Case (g) can be reduced to considering the following equation. 

' si -A —B k C a 1 r 

0 si - A a ^ =0. (53) 

c o J L J 

Inspection of Equation (53) reveals a nontrivial solution if either pair or 
both pairs, (C, A) and (C a ,A a ), are not detectable (observable). Condi- 
tions (ii) and (iii) of Theorem 1 and Condition (i) of Theorem 2 together 
address such a solution. Now, a nontrivial solution to Equation (53) 
still exists if: 1) s = \ a €E A(A a ) and 2) either Condition (i) or (iv) of 
Theorem 1 are violated. 

Cases (a)-(g) are addressed entirely by Theorems 1 and 2, where it 
is furthermore the case that all conditions have been applied (i.e., no 
conditions remain unused). Thus, Conditions (i) and (iii) of Theorem 3 
are established. 

The only remaining case to consider is the situation in Case (h), 
where £, v, and ip are all nonzero vectors. Considering a nontrivial so- 
lution to Equation (47), it is necessary that s = X a , s £ A(A a ) n A(A S ), 
where v and ip are corresponding eigenvectors. Under these assumptions, 
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Equation (47) can be reduced and expressed as 


A aJ-A //' 0 r C 

Cl 0 jo CaV = 0. (54) 

C*2 0 Iq _C s ll> _ 

Equation (54) has a nontrivial solution if and only if either: 

(h.l) for A atS G A„(A 0 )nA u (A s ) (A a , s G A(A a )nA(A s )) not anmvariant 
zero of E ab 1 *)^’ wben 1 < mk + q tben botb CaV G ^m k (^a,s) 
and C 2 C = oiC s ip, where ( £ C" and a G C, or 

(h.2) for A , 0jS G A u (A a ) n A U (A S ) (X a , s G A(A a ) n A(A S )) an invariant 
zero of £ AB fe )( s )’ both ^ aV G Sm k (X a ,s) and C 2 C = aC s if, 
where C G C n and a G C. 

Thus, Conditions (iii) and (iv) of Theorem 3 are established, and Con- 
ditions (i)-(iv) are together a necessary and sufficient condition for de- 
tectability (observability) of the pair (C v , A^). □ 

Corollary 5. For the special case when all of the simultaneous faults 
are constant biases, i.e., step faults, Conditions (i)-(iv) of Theorem 3 
reduce as follows. 

(i) the pair (C, A) is observable, 

(ii) l > mk + q, and 

(iii) £(s) has no invariant zeros at the origin. 

Proof. Observe that when all the actuator and sensor faults are step 
faults, Equation (47) can be expressed as 

' si- A -B k 0 1 

0 sl mk 0 C 

0 0 sl q V = 0. (55) 

Ci 0 0 L ^ 

. C 2 0 Iq . 

First, observe the requirement that the pair (C, A ) be observable (since 
s = 0 does not lie strictly in the open, left- half plane). This requirement 
ensures that the first n columns are linearly independent. Letting s = 0, 
Equation 55 can be expressed in three equations as 


-AC -B k v = 0 

(56) 

CiC = 0 

(57) 

C 2 C + Iq' 4 > = 0 

(58) 
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By inspection, Equation 58 is satisfied for any (. Thus, it is required 
that the remaining two equations be satisfied only by the trivial solution. 
The remaining two equations can be expressed as 


-A 

Ci 


-B k 



' c ' 


V 


= 0. 


(59) 


Now, by appeal to Corollary 2 and the symmetry of the problem, the 
conditions that l > + q and £(s) has no invariant zeros at the origin 

follows. □ 


Remark 2. Conditions (i)-(iii) of Corollary 5 are identical to those pre- 
sented in Theorem 3 of [22] for the simultaneous actuator and sensor 
step fault case. 


Example 3. Consider the 4th-order, linearized vertical-plane dynamics 
of a vertical takeoff and landing (VTOL) aircraft, flying in the airspeed 
range of 60-170 knots, given in [21] and [30] given by 


A = 


-0.0336 0.0271 0.0188 

0.0482 -1.0100 0.0024 

0.1002 0.2855 -0.7070 

0 0 1 


-0.4555 

-4.0208 

1.3229 

0 


0.4422 0.1761 

3.0447 -7.5922 

-5.5200 4.9900 

0 0 

' 1 0 0 O' 

0 10 0 ' 


The state vector is comprised of the horizontal velocity, vertical velocity, 
pitch rate, and pitch angle, that is, x(t) = [ v w q 6 ] . The control 
vector is comprised of the collective pitch angle and longitudinal cyclic 
pitch angle. The collective pitch angle input controls the vertical mo- 
tion, and the longitudinal cyclic pitch angle input controls the horizontal 
velocity [21]. The output vector is comprised of the horizontal velocity 
and vertical velocity, that is, y(t) = [ v w ] .It can be verified that 
k{A) = {2.8174 • 10 -1 ± *9.7701 • 10" 2 , -3.3318 • 10” 1 , -1.9809}, and 
that {A, B, C, 0} is a minimal realization, that is, both controllable and 
observable. 

For the case when the actuators are subject to ramp faults, and the 
sensors are subject to step faults, there are a total of nine possible fault 
configurations having simultaneous faults. A check of the conditions in 
Theorem 3 show that 


1. Conditions (i) and (ii) are satisfied, 
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2. for A a ,s £ A(A a ) n A(A,) = {0} (where \ a , s is not an invariant 



zero of (Ci, A, B )), there are five cases when l < mk + O', he., the 
one case when all actuators and senors are faulty, the two cases 
when both actuators are faulty and either of the sensors are faulty, 
and the two cases when both sensors are faulty and either of the 
actuators are faulty. In all five cases, C a v G (0). For each of 
these cases, since the geometric multiplicity of the zero eigenvalue 
of A s is n s = q, it is always the case that C 2 C = otC s ij}, where 
agC. Thus, Condition (iii) of Theorem 3 is not satisfied for these 
five cases, and the faults are not identifiable, 

3. I > rn, therefore Condition (iv) of Theorem 3 is satisfied, and 

4. for the four cases when £(s) has invariant zeros, that is when only 
one or the other measurement is biased in conjunction with only 
one or the other input being faulty, none of the invariant zeros are 
at the origin. Thus for all four such fault cases, Condition (iv) of 
Theorem 3 is satisfied. 

Thus, for the case when it is of interest to identify ramp faults in the 
actuators together with constant bias in the sensors, there are five fault 
configurations which are theoretically not possible to identify using state 
augmentation. In such cases, other identification methods need to be 
considered. 

5 Conclusions and Future Research 

The fundamental problem addressed in this paper was the determination 
of a theoretical set of necessary and sufficient conditions for identifiability 
of arbitrary combinations of a class of additive, time- varying actuator 
and sensor faults using state augmentation. The provided theorems give 
the conditions which must be satisfied in order for a practical state- 
augmentation-based solution to exist. One recommendation for future 
work on this topic is to investigate identifiability of multiplicative faults 
in the actuators and sensors. Such faults may manifest themselves as a 
loss-of-effectiveness in the actuators and sensors. One relevant example 
of such faults is a reduction in thrust provided by a propulsion system. 
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